Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
iOS Number Of NVD 3626 CRITICAL 138 HIGH 1666 MEDIUM 1480 LOW 246
URL https://www.apple.com/jp/ios/
Explanation This is the operating system installed on the iPhone provided by Apple.
Tag
  • Mobile
  • Apple
Add Information URL
No Type Name URL
1 https://support.apple.com/en-us/HT201222
2 https://developer.apple.com/documentation/ios-ipados-release-notes
3 https://en.wikipedia.org/wiki/IOS_version_history
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
3111 iOS 26 26.5.1 June 1, 2026 Sept. 15, 2025 1 40 38 1
3112 iOS 18 18.7.9 May 11, 2026 Sept. 16, 2024 8 64 89 8
3113 iOS 17 17.6.1 Aug. 27, 2024 Sept. 18, 2023 9 114 178 22
3114 iOS 16 16.4.1 April 7, 2023 Sept. 12, 2022 25 244 303 56
3115 iOS 15 15.7 Sept. 12, 2022 Sept. 20, 2021 39 395 388 72
3116 iOS 14 14.8 Sept. 13, 2021 July 9, 2020 53 566 495 79
3117 iOS 13 13.7 Sept. 1, 2020 Sept. 19, 2019 65 746 579 96
3118 iOS 12 12.5.1 Jan. 11, 2021 Sept. 17, 2018 84 903 659 108
3119 iOS 11 11.4.1 July 9, 2018 Sept. 19, 2017 94 1068 728 116
3120 iOS 10 10.3.4 July 22, 2019 Sept. 13, 2016 120 1289 828 133
3121 iOS 9 9.3.6 July 22, 2019 Sept. 16, 2015 134 1415 955 149
3122 iOS 8 8.4.1 Aug. 13, 2015 Sept. 17, 2014 132 1470 1168 181
3123 iOS 7 7.0.6 Feb. 21, 2014 Sept. 18, 2013 132 1491 1231 204
3124 iOS 6 6.0.2 Dec. 18, 2012 Sept. 19, 2012 132 1517 1294 216
3125 iOS 5 5.0.1 Nov. 10, 2011 Oct. 12, 2011 132 1586 1368 228
3126 iOS 4 4.0.2 Aug. 11, 2010 June 21, 2010 133 1613 1423 235
3127 iPhone OS 3 3.0.1 July 31, 2009 June 17, 2009 133 1620 1438 238
3128 iPhone OS 2 1.1.5 July 15, 2008 July 11, 2008 134 1632 1433 236
3129 iPhone OS 1 1.0.2 Aug. 21, 2007 June 29, 2007 133 1637 1434 237
3130 iOS7.1 7.1.2 132 1484 1207 198
3131 iOS6.1 6.1.6 132 1508 1275 212
3132 iOS6.0 6.0.2 132 1517 1293 216
3133 iOS5.1 5.1.1 132 1527 1346 226
3134 iOS4.3 4.3.5 132 1605 1396 234
3135 iOS4.2 4.2.9 132 1607 1401 234
3136 iOS4.1 4.1 133 1610 1413 234
3137 iOS3.2 3.2.2 133 1614 1428 236
3138 iOS3.1 3.1.3 133 1617 1436 236
3139 iOS2.2 2.2.1 133 1628 1432 232
3140 iOS2.1 2.1.1 133 1632 1433 236
3141 iOS2.0 2.0.2 134 1632 1432 236
3142 iOS16.2 16.2 19 209 270 55
3143 iOS 27 138 1666 1480 246
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
3111 -
6.8 		MEDIUM WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-4410 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3112 -
4.3 		MEDIUM WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during nor… CWE-200
Information Exposure 		CVE-2014-4409 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3113 -
6.9 		MEDIUM The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-4408 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3114 3.3
4.3 		LOW
Local 		IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes craft… CWE-200
Information Exposure 		CVE-2014-4407 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3115 -
9.3 		HIGH IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application t… NVD-CWE-Other
CVE-2014-4405 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3116 -
9.3 		HIGH Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments. CWE-189
Numeric Errors 		CVE-2014-4389 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3117 7.8
9.3 		HIGH
Local 		IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application t… CWE-20
 Improper Input Validation  		CVE-2014-4388 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3118 -
1.9 		LOW Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access. CWE-362
Race Condition 		CVE-2014-4386 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3119 -
1.9 		LOW Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle. CWE-22
Path Traversal 		CVE-2014-4384 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm
3120 -
4.3 		MEDIUM The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header. CWE-20
 Improper Input Validation  		CVE-2014-4383 cpe:2.3:o:apple:iphone_os:7.1:*
cpe:2.3:o:apple:iphone_os:7.1.1:*
cpe:2.3:o:apple:iphone_os:7.0:*
cpe:2.3:o:ap… 		7.1.2 2024-11-21 11:10
2014-09-18 		Show GitHub Exploit DB Packet Storm